Security subsystem refactoring

This includes fixes for PRODMGT-182, AS7-5177, AS7-5206, AS7-5411, AS7-5500, AS7-6101
and probably some others.

* removed most of complex attributes and replaced them with sub resources
* added compatibility so "old" attributes still work as expected
* support for expressions on various attributes/elements
* reworked parser


This is currently missing transformers and some more cleanup but I want to do review before I add them.